THE YOGA OF THE CASSELS-TATE PAIRING 
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Abstract. Cassels has described a pairing on the 2-Selmer group of an elhptic curve which 
shares some properties with the Cassels- Tate pairing. In this article, we prove that the two 
pairings are the same. 



1. Introduction 

In [3], Cassels defined a pairing on the 2-Selmer group of an elliptic curve over a number 
field. It shares some properties with the extension of the Cassels- Tate pairing to the 2-Selmer 
group of an elliptic curve over a number field. He wrote "It seems highly probable that the 
two definitions are always equivalent, but the present writer is no longer an adept of the 
relevant yoga." (see [3], p. 115]). In this article, we prove that the two pairings are the same. 

The Cassels- Tate pairing is an alternating and bilinear pairing on the Shafarevich-Tate 
group of an elliptic curve over a number field. The fact that it is alternating gives information 
on the structure of the Shafarevich-Tate group. For n > 2, its extension from the n-torsion 
of a Shafarevich-Tate group to an n-Selmer group can be used to determine the image of 
the n^-Selmer group in the n-Selmer group. This sometimes enables the determination 
of which elements of the n-Selmer group come from elements of the Mordell-Weil group 
and which come from elements of the Shafarevich-Tate group. The Cassels- Tate pairing is, 
unfortunately, quite difficult to evaluate in practice. The pairing defined by Cassels on the 
2-Selmer group of an elliptic curve, however, is quite straightforward to evaluate. So it is 
useful to prove that the two pairings are equal on the 2-Selmer group of an elliptic curve. 

In Section [2|, we give the Weil-pairing definition and a new definition of the Cassels- Tate 
pairing extended to the ?7,-Selmer group of an elliptic curve, under a hypothesis that is always 
satisfied for n a prime. In Section[3]we present the definition of the pairing defined by Cassels 
on 2-Selmer groups of elliptic curves. In Section H] we present a large diagram and prove 
it is commutative. We also discuss why our methods do not easily generalise to n-Selmer 
groups for n > 2. We use this diagram to prove our main theorem in Section [5] that the 
pairing defined by Cassels is the same as the Cassels- Tate pairing on the 2-Selmer group of 
an elliptic curve over a number field. 
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Recently, Swinnerton-Dyer [13] has generalised Cassels' pairing on the 2-Selmer group, to 
a pairing between the m-Selmer group and the 2-Selmer group. In parallel with the results 
described above, we show that this pairing is again the Cassels- Tate pairing. 

2. Two DEFINITIONS OF THE CaSSELS-TATE PAIRING 

Let E be an elliptic curve defined over K, a number field. The Cassels- Tate pairing is a 
pairing on UI{K, E) taking values in Q/Z. We refer to [2J for the original definition. In the 
terminology of [6] this is the homogeneous space definition. 

Let m, n > 2 be integers. We are interested in the restriction of this pairing to the n- 
torsion UI{K, E)[n], or more generally to in.{K, E)[m] x UI{K, E)[n]. Let S^{K,E) denote 
the n-Selmer group of E over K. The group 'ni{K,E)[n\ is isomorphic to the quotient of 
S'^{K,E) by the image of E{K)/nE{K) under the coboundary map. We write ( , )ct for 
the extension of the Cassels- Tate pairing to S"^{K, E) x S'"'{K, E). By definition this pairing 
is trivial on the images of E{K)/mE{K) and E{K)/nE{K). 

If M is a Gal(Z/ir)-module, then we denote Z'{Gal(K/ K), M) and H\Gal(K / K), M) 
by Z\K,M) and H\K,M), respectively. 

We recall an alternative definition of the Cassels- Tate pairing, called in [6] the Weil-pairing 
definition. For simplicity we assume that the natural map 

(2.1) H\K,E[n]) ^\{H\K,,E[n]l 

V 

where v runs over all places of K, is injective. This is known for n a prime [2], Lemma 5.1]. 
(The injectivity does not hold for E[n] replaced by an arbitrary finite Galois module. See 
[TOl III. 4. 7] for a counter-example.) From Section [3] onwards we restrict to the case n = 2, 
so our hypothesis will be automatically satisfied. 

Let a G S"^{K,E) and a' G S'^{K,E). We apply Galois cohomology over K and its 
completions Ky to 

^ E[n] ^ E[mn] E[m] ^ 

^ E[n] ^ E E ^ 

to obtain a commutative diagram 

H\K, E[mn]) H\K, E[m]) ^ H'^{K, E[n]) 

H\Ky, E) — n. H\K,, E[n]) 

By the above hypothesis, there exists c G H^{K, E[mn]) with nc = a. We represent c by a 
cocycle 7 G Z^{K,E[mn\)] then a = 717 G Z^{K, E[m]) represents a. For each place v of 
K, the cocycle res^(a) = ay in Z^{Ky, E{Ky)) is a coboundary. So there exists Py G E{Ky) 
such that ay = d^y (recall d^y is the cocycle a 1— % — Py). Take Qy G E{Ky) such that 
nQy = (3y. Consider dQy — 7^, G Z^{Ky, E[n\), where 7^, is the restriction of 7. Let Ue be 
the cup product pairing induced by the Weil pairing from H'^{Ky,E[n]) x H^{Ky, E\n\) to 
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H'^{Ky, fj,n)- For s,s' G H^{Ky, E[n]) define {s, s')i^-^oUe,v to be the composition of Ug with 
the invariant map. We define (a,a')i = J^vd^Q^ ~ lv],C'')mvoUe,v 

Proposition 2.2. Let a G S"^{K,E) and a' G S''{K,E). We have (a,a')i = (a,a')cT. 

Proof. See [21 Proof of Lemma 4.1] or [4, §2.2]. □ 

Remark 2.3. The general form of the Weil-pairing definition, avoiding the hypothesis 
that (12. ip is injective, is given in [5l p. 97]. This variant is used in [6] to generalise Proposi- 
tion [22] to abelian varieties. 

Let C and D be torsors {i.e., principal homogeneous spaces) under E. A morphism 
T[ : D ^ C is called an n-covering if 7r(P + Q) = nP + 7r(Q) for all P G -E and Q E D. 
\{ C = E is the trivial torsor, this coincides with the usual notion of n-covering of E. 
For Qi,Q2 & D we write Qi — Q2 for the point on E determined by the fact D is a torsor 
under E. Following [12, Chapter 6] we define the coboundary map 5,^ '■ C{K) H^{K, E[n]) 
by sending P G C{K) to the class of dQ = {a ^"Q - Q) where Q G D(K) with nQ = P. 

In the case C = E, there is a standard bijection between the n-coverings of E up to 
i^-isomorphism, and the Galois cohomology group H^{K, E[n]). It is defined as follows. 
Let i(j : D E he a.n isomorphsim of curves over K with [n] o ip = vr. Then '^ip o ip'^ is 
translation by some C,a £ E[n\ and we identify the i^'-isomorphism class of D with the class 
of a in H\K, E[n]). If Q G D(K) with 7r(Q) = then we can take ip : P ^ P - Q, 

in which case D is represented by —dQ. Note also that if C ^ is an m-covering of E and 

— > C is an n-covering of C, then D ^ E is an mn-covering oi E. If D ^ E corresponds 
to 6 G H^{K, E[mn]), then C E corresponds to nh G H^{K, i?[m]). 

We give a new definition of the Cassels-Tate pairing, again under the hypothesis that (12.11) 
is injective. Let C be an m-covering of E over K representing a. By the hypothesis, a is 
divisible by n in the Weil-Chatelet group. So there is an n-covering ir : D ^ C defined 
over K. Let f be a place of K. Since a is trivial in H^{K^, E{Ky)), there is a point 
P„ G C{K^). We define (a, a')2 = Y^vi^-^i^v) , a')mvou,,v 

Proposition 2.4. Let a G S'^{K,E) and a' G S'^{K,E). We have (a,a')2 = (a,a')i. In 
particular (a, a') 2 does not depend on the choice of the P^. 

Proof. Let Rc G C{K) and Rd G D{K) such that Rc covers on _E and Rd covers Rc- 
Since n{dRD) = dRc represents —a, we can choose 7 G _E[mr;,]), as defined above, 

to be —dRi). For each place f of i^' we are given P^ G C(f^^,). Let (3^ = Pv — Rc, then 
c?/?!, = —dRc', this represents a G i?[m]). Take Qt, G E{Ky) with riQ^, = /S^,. Then 

dQv — Iv = d{Qy + Rd) and 7r(Qt, + P/?) = [3^ + Rc = -Pd- Hence 5t,{Pv) is represented by 
the cocycle dQ^ — 7^, appearing in the definition of ( , )i. □ 

3. The Cassels pairing 

In [3], Cassels defined a bilinear pairing ( , )cas on S'^{K, E) taking values in ^2 with the 
following properties. The element a G S'^{K,E) is in the image of S'^{K,E) precisely when 
(a,a')cas = +1 for all a' G S'^{K,E). For all a G S'^{K,E) we have (a, a) = +1. These are 
properties of the Cassels-Tate pairing on a 2-Selmer group as well. 
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A mild generalisation of Cassels' construction, due to Swinnerton-Dyer [13j , gives a pairing 
S"^{K,E) X S'^{K,E) —>■ fi2- We work with this generalised form of the pairing, which we 
continue to denote ( , )cas- It reduces to Cassels' definition in the case m = 2. 

We prepare to recall the definition of the pairing. The group S^{K,E) is a subgroup 
of H^{K, E[2]). Let A be the finite etale algebra that is the Galois module of maps from 
E[2] \ to K. Then /i2(v4) is the Galois module of maps from E[2] \ to /X2- Let A 
denote the Gal(i^'/i^')-invariants of A. Let E be given by y"^ = F{x) where F{x) = + 
a2X^ + a^x + ae with G K. Then A = K[T]/{F{T)). Let 6'i, 6*2,^^3 be the three roots 
of F{x) in K. We have A = ^i^j) where denotes taking the product over one 
element from each Gal{K / K)-oThit of the set of 6'j's. Let Tj = {Oj,0) & E[2]\0 and define 
w : E[2] —>■ fJ^2{A) by w{P) = {Tj 1— > e2{P,Tj)). Then w induces an injective homomorphism 
from H^{K, E[2]) to H^{K, fi2{A)), which we also denote w. Let rj be the restriction map 
from H^{K,^2{A)) to H^{K{9j), 1x2)- Shapiro's Lemma shows that the map r = n^''^j 
an isomorphism of {K , fj.2{A)) with Y['^ H^(K(9j), fj.2), which we denote H^{A,ji2)- For 
each j, we have a Kummer isomorphism from H^{K{6j), (12) to K{6j)^/{K{6j)^)^. This 
induces an isomorphism, which we denote k, from H^{A,fi2) to A^/{A^)^. Note that the 
image of H^{K, E[2]) in A^/IA^)"^, under k o r o w, is equal to the kernel of the norm from 
A7(A^)2 to K''/{K''f. 

We recall the definition of ( , )cas- Let a e S'^^K.E) and a' e S^{K,E). Let M = 
k o r o w{a') be the element of A^/IA^^ representing a'. The element a G S^{K,E) is 
represented by an m-covering C (which Cassels denotes Pa) of E. Swinnerton-Dyer [T3] 
shows that there are rational functions fj on C, defined over K{6j), with the following three 
properties 

(i) div(/j) = 2T)j where [Dj] t— > Tj = {9j,0) under the isomorphism of Pic°(C) and E, 

(ii) each i^'-isomorphism of K{9i) to K{6j) sending 6i to 6j sends to fj, 

(iii) the product /1/2/3 is a square in K{C). 

He then shows that a 2-covering of C may be defined by setting each fj equal to the square 
of an indeterminate. In the case m = 2, Cassels gives an explicit construction of the fj 
(which he denotes j^) and this makes it practical to compute the pairing. We write / for 
the element of A ®k K{C) given by Tj ^ fj. 

Let f be a prime of K. Since C represents an element in S"^{K,E), there is a point 
P„ e C{K^) (which Cassels calls For 7^, 6j G K.u{9jY/{K^{9jY Y we let (7j, 
denote the quadratic Hilbert norm residue symbol. Let A^ = A ®k Ky and A^ be its 
Gal(i^'^,/-ft'i,)-invariants. Then Ay = Yl^ -^vidj), where this is taken over Ga\{K^/ Ky)- 
orbits. Let (7,5)a^, = 11^(7^; ■)« where 7, 5 G Ay/{Ayy and 'jj,5j are their images in 
Ky{9,r/{Ky{9jry. Cassels defines (a,a')cas = UMiP^), M)a^. 

4. The main diagram 

Now let us introduce Figure 14.11 which will enable us to prove that for a G S"^{K,E), 
a' G S'^{K, E) we have (a, a')cas = (c^, 0'')2- We can define the maps w, r and k locally, in an 
analogous way, and it will not change the image of M, locally. So we will not change our 
notation for these maps. 
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(4.1) 



H\K,,E[2]) X H\K,,E[2]) 




(2) 



X 



H\A,,fi2) 



(4) 



H\A,,fX2) 



(3) 



A^^/iA^^r X A^/{A:^r 



n ( > )if„(fl,) 



We identify 1^2 = f^2 via (—1)^ ® (—1)^ = (—1)^^- Since fi2{Av) is the Galois module 
of maps from £^[2] \ to /i2, this identification induces a map t : fi2{Ay) ® fi2{Ay) — > 
H2iAy). Let be the cup product map via t. Define : fi2{Ay) fi2 by (T 1-^ l(T)) 
]^y7(T), and let A^.,, be the map it induces on iJ^'s. Let rj be the restriction map from 
H'^{Ky, fi2{Ay)) to H'^{Kv{9j), fi2). In the same was as for the if^'s, Shapiro's Lemma shows 
that the map r = is an isomorphism of H'^{Kv, /i2(^i))) with H'^i.K^iOj), 112), which 

we denote H'^i^A^^ 11,2). Let Uj be the cup product map from H^{Ky{6j), ^12) x H^{Ky{9j), (12) 
to H'^{Ky{9j), H2) and U = H^Uj- Let inv : H'^{Kj,, jj,2) — > /i2 be the composition of the 
invariant map with the isomorphism of ^Ij/Ij and /i2, and likewise for invj : H^{Ky{9j), ^12) 
H2- Finally let u : — > be the usual product in fi2- 

Theorem 4.2. The diagram in Figure is commutative. 

We prove this theorem using the following lemmas. 

Lemma 4.3. Identify /i2 ® /i2 = f^2 as above. Then for all P,Q ^ E[2] we have 

e2{P,Q)= n e2(P,T)®e2(Q,r). 

re-B[2]\o 

Proof. A trivial verification. □ 
Lemma 4.4. Diagram (1) in Figure \4.1\ is commutative. 

Proof. Let & H^{Ky, E[2]) be represented by cocycles which, for ease of notation, we 
also write as ^ and ip- We have ^Uei' : {cr, r) 62(^0-, Vt) ^ H'^iK^, ^2)- 

Now w{^) : a {T e2{^a,T)) for T G E[2] \ and similarly for w{iIj). Thus 

N,{w{0 Utw{tlj)) : {a,r)^N,{t{{S^e2{^a,S))®''{T^e2{^r,T)))) 

= N,{t{{S ^ e2(e., S)) ® (T ^-e2(^.,'^"V)))) 

= N,{t{{S ^ e2(e., 5)) ® (T ^ e2CA,T)))) 

= Ar,(T^^e2(e.,T)®e2(>.,T)) 

= n e2(e<x,r)®e20.,T) e/i2®/X2• 
TgB[2]\0 
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By Lemma [4.31 this is the same as ^ Ug ^Z'. 
Lemma 4.5. Diagram (2) in Figure is commutative 



□ 



Proof. Let ^,ip & H^iKy, fi2{Av)). As in the proof of the previous lemma, we use the same 
symbols for cocycles representing these classes. Let Tj = {9j,0) G E[2] \ 0. We must show 
that rj{^ Ut ip) and rj(^) Uj rj^ip) are equal in H'^{Ky{9j), fi2 ® /i2)- We find that they are 
represented by cocycles (cr, r) \—>- ^aiTj) <S)%'ipT){Tj) and (o", r) i-^ (,a(Tj) <^'^{ipr{Tj)). Since 
cr(Tj) = Tj for all a G Gal{K^/ Ky{9j)), these cocycles are equal. □ 



Lemma 4.6. Diagram (3) in Figure is commutative. 



Proof. We have A = U Kv{Oj) where 



Ky. Let Nj denote the norm 



induced by taking the product over each element in the Gal(_ft't,/K„) -orbit of 9j. Recall that 
V : is the usual product in /i2, and let be the map it induces on if^'s. Then 

the map A^^, in Figure WAl factors as the composite of and 



We have the following commutative diagram 



WN, 



(5) 



n*inv 

— nV2 — 



(6) 



H\K,,^2) 



1^2- 



Diagram (5) commutes by the next lemma. That Diagram (6) commutes is obvious. This 
proves the commutativity of Diagram (3). □ 

Lemma 4.7. Let Xj be the Gal{K^/ K^)- orbit ofTj. There is a commutative diagram 



H\K, 



/z. 



Proof. Let l : H'^{K^, ^2°=) ~^ H'^{K^,Ma.p{Xj, fi2°°)) be induced by the inclusion of the 
constant maps. Then vj o t is the restriction map Br(A't,) [2°°] Br(A'„(^j))[2°°]. By [9l §1 
Theorem 3] it is multiplication by dj on the invariants, where dj = [K^{6j) : K^] = i^Xj, 
and therefore surjective. Since Vj is an isomorphism, it follows that l is surjective. Then for 
Tj G Tf^i^Kv, ^2°°) we compute 

(inv o Nj){L{r])) = djinvlf]) = (invj o rj){L{ri)). 

(Alternatively, the definitions in [1], Chapter III, §9] show that Nj o rj^ is corestriction, and 
the lemma then reduces to a well known property of the invariant maps.) □ 

Lemma 4.8. Diagram (4) in Figure is commutative. 

Proof. This is |8l XIV. 2 Prop. 5] applied to each constituent field of Ay. □ 
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Lemmas 14.41 14.5[ I4.6[ 14.81 together prove Theorem 14.21 Composing the maps in the last 
row of (14. ip gives the pairing ( , defined at the end of Section [31 Identifying |Z/Z with 
fi2 we obtain 

Corollary 4.9. Lets,s' G H^{Ky, E[2]). We have {s, s')invoUe,v = {korow{s), korow{s'))A^- 

Remark 4.10. It would be useful to have an analogue of Corollary 14.91 for elements of 
H^{K^, E[n\) for general n (or at least for n prime). Lemma [4.41 depends on the equality in 
Lemma [4.3[ which in turn only works for n = 2. This prevents any obvious generalisation 
to other values of n. Another difficulty is that we use fi2 C in our proofs. 

5. The main theorem 

Let C be a torsor under E, and f E A K{C) as described in Section [3l Let n : D ^ C 
be the 2-covering obtained by setting each fj equal to the square of an indeterminate. The 
following lemma is a variant of [7[ Theorem 2.3]. 

Lemma 5.1. We have [k or o w)((5^(P)) = f{P) mod (A^)'^ for all P G C{K), away from 
the zeroes and poles of the fj . 

Proof Let Q G D(K) with tc{Q) = P. It suffices to show that fj{P) = kjrjw{dQ) 
mod {K{ej)''Y. 

We have rjw{dQ) = (cr ^— e2(^Q — Q,Tj)) in H^{K{9j), fi2)- The construction of D gives 
that /j o TT = t| for some rational function tj on D, defined over K{6j). We claim that 
62(5', Tj) = tj{S + X)/tj{X) for any X G D{K) for which the numerator and denominator 
are well-defined and non-zero. Indeed, since the Weil pairing is a geometric construction we 
may identify D and E over K. This is an identification as torsors under E, so the action of 

on D is identified with the group law on E. Then vr is the multiplication-by-2 map on E, 
and our claim reduces to the definition of the Weil pairing in [TTl Chapter III, §8]. 

Putting S ="Q - Q and X = Q gives ea^^g - Q,T,) = t,fg)/t,(g) =%tj{Q)) /tj{Q) for 
any a G Ga{{K {6 j) / K) . Then rjw{dQ) = (a ^%tj{Q)) /tj{Q)) and kjrjw{dQ) = t]{Q) = 
f.TTiQ) = f){P). □ 

As usual we identify |Z/Z with fi2. 

Theorem 5.2. Let K be a number field and E an elliptic curve over K . Let a G S"^{K, E) 
and a' G S^{K,E). We have (a,a')cas = {o,,a')2 = {a,a')i = {a,a')cT- 

Proof. The identification (a, a')cas = (o,a')2 is immediate from Corollary 14.91 and the local 
analogue of Lemma 15. 1[ The other identifications were established in Section [2j □ 
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